Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633530303a3a2f34302d3438203d3e203532323130.roa
File:                     326130613a363034303a633530303a3a2f34302d3438203d3e203532323130.roa (raw, json)
Hash identifier:          XCMNboGJE2kP21uqCxVobscvPCnRokH0UZoxpti0eZo=
Subject key identifier:   83:71:24:BD:91:17:53:47:E7:51:56:06:B5:B5:E4:3F:86:89:3A:A8
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       46ACDDEF84623B6D54EE8AA34B67F8B870C69852
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633530303a3a2f34302d3438203d3e203532323130.roa
Signing time:             Fri 09 Dec 2022 08:21:00 +0000
ROA not before:           Fri 09 Dec 2022 08:16:00 +0000
ROA not after:            Fri 08 Dec 2023 08:21:00 +0000
asID:                     52210
IP address blocks:        2a0a:6040:c500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ac:dd:ef:84:62:3b:6d:54:ee:8a:a3:4b:67:f8:b8:70:c6:98:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:00 2022 GMT
            Not After : Dec  8 08:21:00 2023 GMT
        Subject: CN=837124BD91175347E7515606B5B5E43F86893AA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8a:d1:26:96:e4:f9:34:f5:71:69:1b:5e:50:
                    c2:65:5c:64:bf:ec:f9:71:b6:b5:63:f3:bd:28:b7:
                    56:4a:fd:03:4f:de:63:27:ed:56:b3:3f:28:0c:92:
                    97:79:17:4b:ff:c6:e0:93:9a:70:a4:3f:d1:1f:e2:
                    3e:3d:d0:40:02:a5:1b:5c:5b:e1:40:15:37:04:7a:
                    18:c4:1e:cb:77:a4:15:3a:af:3f:6d:8e:8b:74:31:
                    0c:6b:66:cb:64:e5:4c:18:a6:47:b4:20:5c:28:26:
                    07:ed:c9:35:2d:e9:01:ce:12:90:c8:79:d1:3e:28:
                    d3:96:8a:94:c0:52:cf:3d:b2:ef:2e:c0:a0:cb:e2:
                    5e:7f:56:f5:45:95:47:e4:5c:5d:0c:04:af:32:83:
                    08:60:61:ea:7d:77:f4:de:71:ce:e6:b2:de:b2:7d:
                    47:b0:85:d5:91:06:ac:57:b4:31:dd:68:fd:a7:a3:
                    f6:46:27:52:01:4d:2d:bb:9d:65:f6:2f:0a:74:66:
                    4a:ad:37:a4:08:33:f5:06:e2:2b:bb:b6:21:40:99:
                    a0:81:db:6c:b8:9f:1e:54:38:a2:3b:31:1c:a7:13:
                    56:3c:c3:c7:63:db:bc:ac:eb:48:b6:bf:43:b7:3c:
                    1d:7c:8f:55:9b:06:59:38:59:a8:e7:65:16:61:71:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:71:24:BD:91:17:53:47:E7:51:56:06:B5:B5:E4:3F:86:89:3A:A8
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633530303a3a2f34302d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:43:de:57:b2:a9:c7:0c:22:17:31:86:52:2c:5e:de:73:49:
         f9:5a:74:8b:b1:03:7a:95:b9:af:58:55:5b:91:d5:a6:ec:d0:
         8b:16:2c:76:4e:c8:87:00:69:f4:f2:11:1d:8a:9d:78:62:c3:
         c0:02:9e:d1:bf:69:4a:0f:73:b0:48:15:41:90:46:2c:25:5f:
         1f:23:b8:d9:2b:62:fb:7c:74:06:24:75:44:a3:ba:b2:af:6e:
         3a:ba:30:d3:bf:7b:80:4f:17:66:4c:63:04:a2:b5:67:5e:c3:
         57:71:a5:8c:a4:75:cc:bf:d4:14:cf:f4:02:e4:df:01:fa:e1:
         70:65:d6:aa:63:3f:52:31:05:2e:86:5c:86:f7:c7:6a:96:ad:
         9b:3a:12:ae:ad:e0:63:9f:31:1f:15:55:be:06:b2:e1:37:12:
         ac:e8:bb:cc:13:a2:20:cf:d9:a7:f0:26:d7:95:de:7c:dd:88:
         28:bd:b6:93:f1:f9:f3:fa:d7:01:12:53:db:5d:b9:92:30:0e:
         33:88:c4:07:a8:e2:92:bd:66:2c:2f:51:88:e3:33:fd:6c:d4:
         99:79:d9:c9:c1:d8:cd:dd:99:62:79:41:df:4f:fd:ad:61:d8:
         8c:64:10:13:4e:a5:16:35:93:ec:be:f4:e3:b3:ef:49:0a:36:
         09:10:05:93
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIURqzd74RiO21U7oqjS2f4uHDGmFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMDkwODE2MDBaFw0yMzEyMDgwODIxMDBaMDMxMTAvBgNV
BAMTKDgzNzEyNEJEOTExNzUzNDdFNzUxNTYwNkI1QjVFNDNGODY4OTNBQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0itEmluT5NPVxaRteUMJlXGS/
7PlxtrVj870ot1ZK/QNP3mMn7VazPygMkpd5F0v/xuCTmnCkP9Ef4j490EACpRtc
W+FAFTcEehjEHst3pBU6rz9tjot0MQxrZstk5UwYpke0IFwoJgftyTUt6QHOEpDI
edE+KNOWipTAUs89su8uwKDL4l5/VvVFlUfkXF0MBK8ygwhgYep9d/Tecc7mst6y
fUewhdWRBqxXtDHdaP2no/ZGJ1IBTS27nWX2Lwp0ZkqtN6QIM/UG4iu7tiFAmaCB
22y4nx5UOKI7MRynE1Y8w8dj27ys60i2v0O3PB18j1WbBlk4WajnZRZhcSrlAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUg3EkvZEXU0fnUVYGtbXkP4aJOqgwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGTBggrBgEFBQcB
CwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2MzM1
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDM1MzIzMjMxMzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgD
BgAqCmBAxTANBgkqhkiG9w0BAQsFAAOCAQEAeUPeV7KpxwwiFzGGUixe3nNJ+Vp0
i7EDepW5r1hVW5HVpuzQixYsdk7IhwBp9PIRHYqdeGLDwAKe0b9pSg9zsEgVQZBG
LCVfHyO42Sti+3x0BiR1RKO6sq9uOrow0797gE8XZkxjBKK1Z17DV3GljKR1zL/U
FM/0AuTfAfrhcGXWqmM/UjEFLoZchvfHapatmzoSrq3gY58xHxVVvgay4TcSrOi7
zBOiIM/Zp/Am15XefN2IKL22k/H58/rXARJT2125kjAOM4jEB6jikr1mLC9RiOMz
/WzUmXnZycHYzd2ZYnlB30/9rWHYjGQQE06lFjWT7L7047PvSQo2CRAFkw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org